07 // CORTI IMPLEMENTATION FIELD NOTE //
Raw first. Optional hosted text second. Corti now has a branch that can clean finalized transcript rows, run a stronger final rewrite, and keep a bounded live assistant beside the call. This is an implementation report—not a release announcement.
READ THE LABELS BEFORE THE SCREENSHOTS
Present in Corti branch tip 8891173.
Recorded by the branch's pinned verification run.
Real React code rendered with deterministic synthetic fixtures.
Designed or partially wired, but not a production availability claim.
The canonical Tauri bundle command produced a signed app that passed strict verification, then Finder's styling AppleScript timed out with -1712. The exact DMG gate failed twice. No current DMG size is inferred, no new release is claimed, and PR #113 remains a draft even though source checks and GitHub CI are green.
THE NEW LIVE SURFACE
The live reader publishes raw rows before optional cleanup. Accepted text can be read cleanly or inspected as a semantic diff; failures remain visibly raw. The assistant and content-free diagnostics share the window without becoming transcript authority.
IMPLEMENTED // THE NON-NEGOTIABLE PATH
Audio stays on the transcription path. Rewrite and question adapters receive typed text only. Capture, live ASR, and raw publication use bounded nonblocking handoff; hosted saturation, auth wait, cancellation, malformed output, timeout, or provider failure cannot erase the raw transcript.
IMPLEMENTED AT 8891173
Finalized phrase rows enter a single-flight, newest-pending lane after raw publication. Complete generation fences reject stale text while retaining terminal accounting.
A stronger deterministic-chunked pass settles before the batch filing checkpoint or a live Vagus note's final state flip. Failure files validated clean-or-raw text instead of blocking.
Connection does not enable egress. Master, lane, model, steering, word-bank, cache, and repeated-question controls are revisioned; first enable requires persisted disclosure.
One pinned template and a bounded visible ad-hoc queue stay session-only. Content-free queue history retains typed outcomes, nullable usage and cost, cache source, and fine timing—not prompts or transcript bodies.
Validated final output is durably encrypted before application. A crash-ambiguous dispatch is not repeated automatically, preventing a silent second paid attempt.
Desktop split view, a narrow focus-trapped drawer, focus restoration, semantic diffs, live regions, forced-colors support, and complete reduced-motion overrides are present and exercised by deterministic UI tests.
IMPLEMENTED // EGRESS IS A CHOICE
The hosted tab states the boundary before provider cards: selected transcript text, unique words, steering, and questions may leave the Mac; audio does not. Direct keys and the hosted master key use non-synchronizing macOS Keychain items and never cross into React.
The production network path is additionally deny-by-default. A credential, an authenticated catalog, a selected model, persisted user controls, the encrypted store, and the explicit production arm must all agree before direct egress.
PROVIDER TRUTH // STATUS IS PART OF THE API
“Documented” means an adapter contract and tested wiring exist. It does not mean generally available, benchmarked, privacy-approved, tariffed, or proven against a real account. No paid-model request was made during implementation or verification.
Implemented: exact account catalog filtering, structured streaming, usage/cache normalization, Keychain-backed app wiring, and deny-by-default production arming.
Unavailable: approved real-account results, Corti quality/latency measurements, and production pricing. API billing is not subscription access.
Implemented: paginated account catalog, structured streaming, usage/cache normalization, distinct API-billing credential wiring, and the same egress gates.
Unavailable: approved real-account validation, quality/latency measurements, and a reviewed tariff match.
Implemented: ADC semantics, injected auth tests, fixed-cadence recovery, newest-only catch-up, and the exact warning gcloud token isn't armed.
Gated: the production app supplies an unarmed resolver and no live Vertex factory pending project, region, catalog, privacy, and service-readiness gates.
Broker and device-code interfaces compile only behind codex-experimental. The app supplies no ambient launcher or production provider factory. Production and non-coding support remain external blockers.
There is no subscription adapter, credential import, login command, or routing. Written Anthropic permission is required before that changes. Direct Anthropic API billing is a separate path.
The exact direct-OpenAI model id is filtered in the account catalog. Corti latency, cleanup quality, cancellation waste, and Codex availability are unavailable, so it is not an automatic-live default.
IMPLEMENTED // SESSION-ONLY QUESTIONS
The pinned question can rerun only after an explicit repeated-cost acknowledgement. Ad-hoc questions remain a bounded visible queue. Every answer is tied to a transcript revision, and question/answer bodies never enter Vagus, durable telemetry, logs, or provenance.
On narrow windows the same surface becomes a keyboard-operable drawer with focus trap, Escape and backdrop close, unread state, and focus restoration.
MEASURED // PINNED VERIFICATION RECEIPT
Measurements compare feature baseline cc6f75a with the verified implementation snapshot. Logical bytes are not filesystem allocation. The complete command ledger and hashes live in the pinned metrics report.
| Metric | Before | Verified snapshot | Delta |
|---|---|---|---|
| All tracked files / logical bytes | 251 / 2,327,659 B | 297 / 3,556,077 B | +46 / +1,228,418 B (+52.7748%) |
| Code files / logical bytes | 105 / 1,173,891 B | 147 / 2,316,291 B | +42 / +1,142,400 B (+97.3174%) |
| Workspace members | 14 | 16 | +2 |
| Workspace dependency entries | 23 | 32 | +9 |
| Cargo.lock package records | 693 | 697 | +4 |
| npm lockfiles | unchanged | unchanged | 0 |
376 Rust + 61 Vitest + 17 Playwright. The canonical set uses one capture run and does not count repeated screenshots or backend-configuration reruns twice. Five Rust tests were ignored because external ASR, VAD, diarization, and speech fixtures were unavailable.
Each deterministic Playwright run passed 17 cases and produced 19 PNGs. Both fresh manifests were byte-identical. The reviewed source set totals 6,139,199 logical bytes and contains synthetic content only.
The signed bundle executable grew from 43,171,632 B to 44,743,264 B. The release-style app zip grew from 17,219,479 B to 17,933,511 B: +714,032 B (+4.1467%).
The production frontend output was 424 B HTML, 40,450 B CSS, and 366,019 B JavaScript. The UI lockfile was unchanged by this feature.
| Operation | Measured result | Wall time |
|---|---|---|
| Final locked/offline Rust workspace suite | 376 passed · 5 ignored | 53.73 s |
| Frontend Vitest suite | 61 passed | 1.28 s |
| Frontend production build | 60 modules · 406,893 B output | 2.24 s |
| Deterministic Playwright capture | 17 passed per fresh run | 10.12 s / 9.84 s |
| Optimized Cargo release phase | signed app produced | 264 s |
| First full Tauri app + DMG command | app pass · DMG fail | 408.97 s |
DELIVERY POSTURE
Formatting, default/all-feature clippy lanes, independent AWS/local lanes, the locked/offline workspace, frontend checks, and deterministic captures passed in the recorded verification.
GitHub Actions on 8891173 is green across frontend, format, clippy, tests, and independent backend lanes on Rust 1.98.
The ad-hoc-signed app passed the release verification script and strict deep codesign verification.
Finder's styling AppleScript timed out with -1712 twice. Current DMG bytes and a publishable release pair are unavailable.
NETWORK RECEIPT: provider and AWS ambient credentials were removed or disabled for verification. Provider tests used injected transports and synthetic fixtures; browser captures blocked every non-loopback request. No paid-model request or ambient credential lookup occurred.
FUTURE / EXPERIMENTAL / BLOCKED
Rerun the exact canonical bundle command successfully, then update the measured artifact receipt. Until then the PR remains draft.
Approved account, project, region, retention, catalog, tariff, model-quality, time-to-first-text, and cancellation-waste checks remain future work. Production dollar estimates are unavailable because the app currently supplies no reviewed pricing catalog.
Vertex still needs production ADC/catalog wiring. Codex still needs production and non-coding approval. Claude subscription routing remains blocked without written Anthropic permission.
The branch implements a bounded atomic AES-256-GCM exact cache/final journal. The design's longer-term SQLite TTL, LRU, purge, rotation, and broader recovery shape is not claimed as complete.
Five model-dependent Rust tests remain ignored because their real fixtures were unavailable. The unchanged UI lockfile also reported two pre-existing high-severity audit findings; audit is not a configured gate.
PINNED EVIDENCE
Publication snapshot: 2026-08-21. Branch feat/live-post-processing at 8891173f13d450e4842984788c1851abb80ce7c6. PR and issue state may change after this field note; the pinned code and metrics links do not.
Ready for the stable, released Corti story?
back to 02 // Corti →